A critical Zoom vulnerability chain could have allowed an attacker to take control of another participant’s device simply by joining the same meeting.
The attack required no clicks, downloads, or other interaction from the victim.
Researchers at A Security dubbed the vulnerability chain “ZOOMSDAY” and said they developed a working exploit in less than 24 hours using fewer than 20 prompts with publicly available AI models. The findings highlight both the potential severity of vulnerabilities in widely used collaboration platforms and the growing role of AI in accelerating offensive security research.
“The barrier to producing this class of…
Read the full article at TECHREPUBLIC.COM
